Cyber Essentials is a government-backed scheme that empowers all kinds of businesses to take charge of their cyber security.
By learning and applying this simple, powerful security framework, you can keep your business protected from most common cyber threats.
The Cyber Essentials scheme is delivered by the IASME Consortium. IASME also maintains a directory of all Cyber Essentials certified businesses. Any business that obtains the certification can be included.
If the idea of getting certified seems daunting, OfficeTek can help. For a fixed monthly fee, our certified cyber security experts will be at your disposal to make sure you pass with flying colours, first time round.
Cyber Essentials Certification
The process for getting Cyber Essentials certified is surprisingly simple.
1
First, our cyber expert team helps you to identify and implement any changes you need to make, in order to meet the Cyber Essentials standard. We’ll work closely with you for as long as it takes to bring your entire cyber security system up to scratch – and keep it there.
2
When we’re 100% certain that the standards have been met, we’ll complete the self-assessment paperwork for you. A few days later, you’ll be notified that you’ve passed! Your business can be included in the IASME directory, and you can display the Cyber Essentials logo on your website.
3
Once you’re certified, your present and future clients can rest assured that you’re informed about cyber security and committed to keeping their data safe. And you can relax, too, knowing that you have an excellent security system in place.
4
Of course, certification isn’t the end of the road. The cyber security landscape is constantly evolving, and new threats emerge every day. But there’s no need to fear: our experts will continue to work with you to ensure that your system stays safe and compliant with the Cyber Essentials framework. We’ll carry out the required audits and make sure you can easily renew your certification when the time comes.
Cyber Essentials Certification
Cyber Essentials certification is a key asset for your business, and it’s important to get every aspect right.
Secure Configuration
All software and devices in your network should be securely configured to prevent unauthorised access and to defend against malware. They should not have any unnecessary software installed. All default passwords should have been changed to strong passwords that cannot be guessed or decoded – these should be updated periodically.
Firewalls
Your business’s network should be protected from internet threats by a secure, regularly updated firewall. Access to the firewall’s administrative interface should be controlled by whitelisting or two-factor authentication.
User Access Controls
User accounts should be correctly managed to prevent all unauthorised access to your business’s data. Each user should have a unique ID and a strong password. Administrator status should be granted to a limited number of users only, and strictly on the basis of need.
Patch Management
Updates and patches should be applied to your software and devices as soon as they are available. Devices should be replaced when they can no longer be updated to the most recent operating system. Software must be supported and properly licensed.
Malware Protection
Servers and devices must be protected by a current anti-malware solution, updated daily. If using software, web pages and downloaded files should be scanned automatically, and access to malicious websites should be blocked. Whitelisting (only allowing certain applications) and sandboxing (running unknown code in an isolated environment) are also acceptable solutions.
Cyber Essentials Certification
Benefits of certification
Backed by the NCSC (National Cyber Security Centre), Cyber Essentials certification is highly beneficial to your business. Here are just a few of the plus points:
Reassure your customers
Servers and devices must be protected by a current anti-malware solution, updated daily. If using software, web pages and downloaded files should be scanned automatically, and access to malicious websites should be blocked. Whitelisting (only allowing certain applications) and sandboxing (running unknown code in an isolated environment) are also acceptable solutions.
New business
Many major clients, especially those in the government and defence sectors, require contractors to be Cyber Essentials certified. Being listed in the IASME directory can bring you to their attention.
You’re in charge
Cyber Essentials puts you in control of your business’s security while providing a simple, transparent framework for action.
Data protection
The Cyber Essentials framework is good data protection practice, and can serve as evidence that your business is working to be GDPR compliant.
Deter the bad guys
The Cyber Essentials logo is a sign that you know how cyber security works and have safeguards in place. You’ll be a much less appealing target to cybercriminals.
Keeping your system updated
Retaining your certification means keeping your system updated. It’s a simple and rewarding way to make sure your cyber security policy continues serving your business well into the future.
Get in touch
Everything you need, including the cost of accreditation, is covered by our monthly fixed fee. There are no hidden charges and no unexpected fees. Why hesitate?
If you’re interested in becoming Cyber Essentials certified or would like to explore the benefits for your business, just send a message or set up a free 15-minute Discovery Call via our contact page.
Here to support you
Let’s find out if we are the right fit
-Try our 3 step process
Book your call
We’ll talk to you, your team and build a clear picture of how your business operates.
We analyse
We’ll check how your existing system is working for you and identify anything that’s slowing you down.
We’ll present
We’ll present all our findings clearly and outline any areas for improvement- with no obligation.